Privacy Policy

Last updated: November 3, 2026

Who is responsible for your data

Amsonia AB is the data controller for the personal data described here. My photography work is part of Amsonia AB.

Address: Oviksgatan 65, 162 64 Vällingby, Sweden
Email: drt@mac.com
Organization number: 556844-0746

The short version

I collect personal data when you contact me and when a photograph of you appears on this site. Squarespace, which hosts the site, sets a few cookies; those that count visits are set only if you accept them. Prints and image licenses are sold through Picfair, not through this site.

When you contact me

The contact form asks for your name, email address, the type of work, dates, location, and your message. You may also email me directly instead.

Why: to answer you and to discuss a photography assignment if that is what you are asking about.
Legal basis: my legitimate interest in responding to business inquiries (Art. 6(1)(f)).
Is it obligatory: no. If you would rather not use the form, email me instead.
How long I keep it: inquiries that do not lead to work are deleted within 12 months. Inquiries that become assignments are kept in that client record for as long as our work and my legal obligations require.
Where it goes: Squarespace stores your message in my site account and emails it to me. My email service is provided by Apple.
Spam protection: the form uses Google reCAPTCHA, provided through Squarespace, to tell people from automated programs. Google receives technical information about your browser and device for that purpose and handles it under its own terms.
Who else sees it: nobody beyond the service providers named here.

If you appear in one of my photographs

Some galleries show people, including portraits and event photos. A photograph in which you can be recognized is personal data about you.

When I publish a photograph in which someone can be recognized, I rely on that person's consent (Art. 6(1)(a)), given in a signed release or at or after the shoot. For some photos taken at public events, I rely instead on my legitimate interest in showing my work (Art. 6(1)(f)). You can withdraw your consent at any time.

If you appear in a photograph here and would like it removed, email me, and I will take it down.

Cookies

Squarespace sets cookies on this site. A necessary cookie protects the contact form against misuse and needs no consent. Analytics cookies let Squarespace count visitors and sessions; they are set only if you click Accept in the cookie banner, and the longest of them lasts two years. You can decline them in the banner, and you can withdraw your consent at any time by deleting this site's cookies in your browser. Squarespace's list of cookies on Squarespace sites describes each one.

I use Squarespace's built-in visit statistics, which show me totals such as how many people visited and which pages they read. I do not use Google Analytics, advertising cookies, or social media trackers.

Fonts

The site's typefaces load from Adobe Fonts. To fetch them, your browser contacts Adobe's servers, which tells Adobe your IP address.

Prints and image licensing

The Prints & Licensing links lead to prints.danethomasphotography.com, my store on Picfair. Picfair runs the store, takes payment, and handles your order under its own privacy policy.

Hosting and transfers outside the EU

The site is hosted by Squarespace, a company based in the United States, which processes data on my behalf. This includes standard server logs with visitors' IP addresses, kept to run the site and keep it secure (legitimate interest, Art. 6(1)(f)). Your data may therefore be processed in the United States. Squarespace relies on the EU–US Data Privacy Framework for this, with the EU's standard contractual clauses as a fallback.

Automated decision-making

I make no decisions about you by automated means, and I do not profile you.

Your rights

You may ask me to give you a copy of the personal data I hold about you (Art. 15), correct anything inaccurate (Art. 16), delete it (Art. 17), restrict how I use it (Art. 18), provide it in a portable format (Art. 20), or stop processing based on legitimate interests (Art. 21). Where I rely on your consent you may withdraw it at any time (Art. 7(3)), without affecting anything done beforehand.

Email me at drt@mac.com, and I will respond within one month.

If you are unhappy with how I have handled your data, you may complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se, or to the supervisory authority where you live or work.

Changes

If this policy changes, I will update the date above.